Samba PDC/BDC

[klussier at comcast.net]

Hi All,

I am in the process of replacing a Windows AD Domain controller with Samba and LDAP. I have another office elsewhere in the world that is connected via an IPSEC VPN. I want to create a secondary Samba/LDAP server in that office so that they can authenticate against a local server rather then having to traverse the VPN tunnel several times. Replicating LDAP is pretty easy using slurpd and maintains the centralized management model that I am trying to build (create a user here, and they can log in over there). My question is more on the Samba side of things. Can I build the Samba server over there as a BDC like in the old days when there was a concept of a PDC and a BDC? Can I still have both Samba servers act as a domain controller for the same Windows domain? I haven't displaced Active Directory before, so what pitfalls should I be aware of? Is there anything non-obvious to setting up the same domain in two places?

TIA,
Kenny